ZombieLoad

ZombieLoad is a set of security vulnerabilities that affect processors that use speculative execution, which is a technique used to improve performance by predicting the outcome of instructions before they are executed. The vulnerability was first discovered in 2018 and affects processors from multiple vendors, including Intel and AMD...

ZombieLoad, also known as Microarchitectural Data Sampling (MDS), was first discovered in 2018 by researchers from several institutions, including Graz University of Technology, the Technical University of Munich, and the University of Adelaide. The researchers published a paper in May 2018 detailing the vulnerabilities, which led to the discovery of the ZombieLoad attack.

The vulnerability allows an attacker to access sensitive information from the memory, including sensitive information such as login credentials, cryptographic keys, and other sensitive data. The vulnerability is caused by a design flaw in the affected processors that allows an attacker to exploit the speculative execution process to access the data.

As for iOS, Apple has released a security update to iOS 12.4.1 and later to help protect against ZombieLoad. Apple has also worked with browser vendors to help mitigate the risk of ZombieLoad attacks through web browsers. It's important to keep your device updated with the latest security updates to ensure that your device is protected against these vulnerabilities. It is important to note that the vulnerability cannot be completely eliminated by a software update, as the vulnerability is caused by a design flaw in the affected processors. As a result, vendors have released microcode updates and software updates to mitigate the risk of the vulnerability.

It's important to keep your device updated with the latest security updates to ensure that your device is protected against these vulnerabilities. Additionally, Apple has also worked with browser vendors to help mitigate the risk of ZombieLoad attacks through web browsers.